
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft
File: 5A33E6B82000487B204D2E284BCA10AF293CB41E.mft (raw, json)
Hash identifier: ZRqUNoaj/W/KJYgxBpDU8xl9U9rZabrU6OQJAzYtEec=
Subject key identifier: 6F:0B:C6:39:67:9F:72:B7:60:F8:C6:B2:31:6B:6F:DF:FC:DA:F2:73
Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E
Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E
Certificate serial: 0E2D384E8B70B2C6777DA6C1A92B03F904B2D9D6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft
Manifest number: 0266
Signing time: Fri 17 Apr 2026 08:41:28 +0000
Manifest this update: Fri 17 Apr 2026 08:36:28 +0000
Manifest next update: Mon 20 Apr 2026 16:07:28 +0000
Files and hashes: 1: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (hash: r9SVfRPCCO6Vtp/Ep+AtielHzNI3IGy4ov5IgZ3sTaU=)
2: 5A33E6B82000487B204D2E284BCA10AF293CB41E.crl (hash: z+U7FXQNBvLDf6X8TUu1Dh/8t5PNsCvGihBPyNrwOIU=)
3: 3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (hash: BM3/ntG2tCXetdLzUXN2Dv36rJzRqgaPhlxdrf1W2CU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl
rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 16:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2d:38:4e:8b:70:b2:c6:77:7d:a6:c1:a9:2b:03:f9:04:b2:d9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E
Validity
Not Before: Apr 17 08:36:28 2026 GMT
Not After : Apr 20 16:07:28 2026 GMT
Subject: CN=6F0BC639679F72B760F8C6B2316B6FDFFCDAF273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:29:e9:bb:11:fc:ec:cd:98:72:fc:28:5d:
b3:90:3f:8e:f2:c7:f9:8e:36:89:55:5d:13:2a:c1:
77:9a:93:84:5f:ba:4c:ac:af:e8:ff:4e:87:eb:35:
9c:62:3b:4c:eb:fc:93:02:de:b6:62:ac:58:7f:0c:
5f:9d:8d:d2:d9:5c:1f:f4:3f:20:25:81:01:b5:0d:
9d:00:57:67:04:d4:44:0c:41:e2:c2:94:e1:2e:85:
56:e7:dd:eb:ab:48:b2:ae:fd:f7:55:a9:d4:e2:11:
0e:a6:52:91:83:f5:02:4c:f8:82:ce:b5:fd:11:5a:
44:74:c8:c2:48:ac:7b:b3:39:ee:97:09:b8:26:f9:
72:db:11:8c:81:94:c8:92:53:ce:b0:5b:20:35:c8:
0e:37:ff:86:65:95:86:f9:40:4c:c9:b2:73:33:b1:
15:cc:63:86:91:da:74:2a:2b:16:0d:38:0e:2e:b0:
24:18:4c:ca:05:60:0a:a4:e6:67:d1:86:f6:4d:59:
0f:67:07:fb:f3:16:11:11:09:71:94:06:8b:d2:f9:
61:c4:f1:a7:ae:59:1b:bb:c0:de:58:a3:9e:75:8c:
30:86:aa:01:a8:50:46:f5:99:35:b6:ba:33:69:ff:
ad:c3:5d:b3:fa:e9:f5:b7:39:d3:bd:85:86:db:d0:
49:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0B:C6:39:67:9F:72:B7:60:F8:C6:B2:31:6B:6F:DF:FC:DA:F2:73
X509v3 Authority Key Identifier:
keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cf:14:1e:a4:30:e7:af:13:e9:e0:57:c8:a5:72:e9:60:af:
ec:65:3a:2e:87:46:ee:50:bc:f3:65:0c:d3:fa:b3:c7:ae:70:
04:77:4d:9a:3e:e8:bc:d1:08:24:ed:8a:45:7b:fb:23:d9:32:
cb:35:e8:6c:36:f7:6a:2c:eb:bf:5d:2d:87:78:f7:5f:23:09:
42:b5:4c:fd:aa:76:ce:7f:ae:f7:21:bc:e8:b3:19:01:bc:0c:
b2:23:55:7a:79:0f:6c:93:ef:e8:97:96:b3:2f:16:ef:aa:c0:
00:3d:6e:b8:4d:5b:27:e0:d0:1c:1d:96:ad:18:2f:b4:d3:af:
e8:58:96:a1:5c:ef:cf:60:7a:34:fc:0c:31:7a:ac:87:bc:f0:
d1:01:10:80:42:ed:6a:34:ba:38:fd:d5:a8:e2:41:80:ef:df:
bc:04:4a:21:11:84:06:7d:0a:e0:07:06:aa:c8:b2:b1:51:f9:
a4:8a:dc:b3:0b:36:96:fa:90:5d:bc:24:35:92:5b:8d:8a:f1:
5f:ae:7b:77:ab:82:1b:24:22:36:64:96:7c:b5:c4:34:87:7e:
21:5f:0b:9f:3e:97:86:23:d1:5e:4b:38:ed:8e:a4:78:f8:ab:
24:15:75:69:30:23:52:b0:1a:8d:5d:59:77:fa:82:ca:f7:36:
5f:a3:80:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:54 2026 by rpki-client